mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-29 13:05:46 +00:00
1d3e77f373
Fixes tailscale/corp#19459 This PR adds the ability for users of the syspolicy handler to read string arrays from the MDM solution configured on the system. Signed-off-by: Andrea Gottardo <andrea@gottardo.me>
78 lines
2.3 KiB
Go
78 lines
2.3 KiB
Go
// Copyright (c) Tailscale Inc & AUTHORS
|
|
// SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
package syspolicy
|
|
|
|
import (
|
|
"errors"
|
|
"sync/atomic"
|
|
"testing"
|
|
)
|
|
|
|
var (
|
|
handlerUsed atomic.Bool
|
|
handler Handler = defaultHandler{}
|
|
)
|
|
|
|
// Handler reads system policies from OS-specific storage.
|
|
type Handler interface {
|
|
// ReadString reads the policy setting's string value for the given key.
|
|
// It should return ErrNoSuchKey if the key does not have a value set.
|
|
ReadString(key string) (string, error)
|
|
// ReadUInt64 reads the policy setting's uint64 value for the given key.
|
|
// It should return ErrNoSuchKey if the key does not have a value set.
|
|
ReadUInt64(key string) (uint64, error)
|
|
// ReadBool reads the policy setting's boolean value for the given key.
|
|
// It should return ErrNoSuchKey if the key does not have a value set.
|
|
ReadBoolean(key string) (bool, error)
|
|
// ReadStringArray reads the policy setting's string array value for the given key.
|
|
// It should return ErrNoSuchKey if the key does not have a value set.
|
|
ReadStringArray(key string) ([]string, error)
|
|
}
|
|
|
|
// ErrNoSuchKey is returned by a Handler when the specified key does not have a
|
|
// value set.
|
|
var ErrNoSuchKey = errors.New("no such key")
|
|
|
|
// defaultHandler is the catch all syspolicy type for anything that isn't windows or apple.
|
|
type defaultHandler struct{}
|
|
|
|
func (defaultHandler) ReadString(_ string) (string, error) {
|
|
return "", ErrNoSuchKey
|
|
}
|
|
|
|
func (defaultHandler) ReadUInt64(_ string) (uint64, error) {
|
|
return 0, ErrNoSuchKey
|
|
}
|
|
|
|
func (defaultHandler) ReadBoolean(_ string) (bool, error) {
|
|
return false, ErrNoSuchKey
|
|
}
|
|
|
|
func (defaultHandler) ReadStringArray(_ string) ([]string, error) {
|
|
return nil, ErrNoSuchKey
|
|
}
|
|
|
|
// markHandlerInUse is called before handler methods are called.
|
|
func markHandlerInUse() {
|
|
handlerUsed.Store(true)
|
|
}
|
|
|
|
// RegisterHandler initializes the policy handler and ensures registration will happen once.
|
|
func RegisterHandler(h Handler) {
|
|
// Technically this assignment is not concurrency safe, but in the
|
|
// event that there was any risk of a data race, we will panic due to
|
|
// the CompareAndSwap failing.
|
|
handler = h
|
|
if !handlerUsed.CompareAndSwap(false, true) {
|
|
panic("handler was already used before registration")
|
|
}
|
|
}
|
|
|
|
func SetHandlerForTest(tb testing.TB, h Handler) {
|
|
tb.Helper()
|
|
oldHandler := handler
|
|
handler = h
|
|
tb.Cleanup(func() { handler = oldHandler })
|
|
}
|